Security Scan Report: www.westcoastdhb.org.nz

Redirected to:
https://www.healthnz.govt.nz/hospitals-services/hospitals/west-coast
Site favicon
Submitted: May 27, 2026, 1:38:46 PMCompleted: May 27, 2026, 1:40:34 PMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 2 countries across 3 domains to perform 1 HTTP transaction. The main domain is healthnz.govt.nz.

Submitted URL: http://www.westcoastdhb.org.nz/

Effective URL: https://www.healthnz.govt.nz/hospitals-services/hospitals/west-coastRedirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Multiple high‑severity JavaScript keylogger detections on a brand‑mismatched, newly‑registered site confirm a malware distribution scam.

Risk Factors
High‑severity JavaScript keylogger YARA matches
Unranked domain with brand mismatch
Domain age unknown / newly registered
DevTools blocking indicates anti‑analysis
Brand name in meta tags does not match domain
Domain age information unavailable

Details

Page Title

New Tab

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

healthcare medical

(83%)

Domain Information

Within the New Zealand country-code top-level domain (.org.nz), 'www.westcoastdhb.org.nz' is registered, featuring subdomain 'www'. The registrable portion 'westcoastdhb' spans 12 characters holding three vowels versus nine consonants. Breaking it apart gives 4 words: west, coast, d, hb. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://www.westcoastdhb.org.nz/

Page Load Overview

12.19s
Total Load Time
219
HTTP Requests
15
Domains
6.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-NZ
Text Length:31,840 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical83% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
83%
adult content
69%
government public service
56%
government
48%
documentation technical
29%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11054.253.42.35Sydney, New South Wales, Australia
AS16509Amazon.com, Inc.
109192.124.249.15Menifee, California, United States
AS30148Sucuri
2192--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DB836CF5D6F96394548FC3E5DB661865AE2F00FB268981A4722D9FE09F11898CF87CC0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:iXfYIkPaAntuxf/N6cw15UxDTtI0xhfK6DV/JHnOJwNtPDsTSHsf:Yv2AZBxLDV/JHc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:87275:rEYFBwBkSQRfFTNAQPABoeGCABHGAIBiAADCTggBxSoINEIBA3GQUwWFdY0BCkgIEIGCITSAsVmdGg0A0JAe/mpEgYDhI0BB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:eee7c3e7fffffffe
Perceptual Hash:f7225588dd88dd89
Difference Hash:080c1e0800000000
Wavelet Hash:1e0703270f0f0f0e
Color Hash:#7b40bf

Other Hashes

Crop Resistant:080c1e0800000000

Scan History

Scan history not available

Unable to load historical scan data